Ubuntu
apache2 package

apache2 2.4.46-4ubuntu1.5 source package in Ubuntu

Changelog

apache2 (2.4.46-4ubuntu1.5) hirsute-security; urgency=medium

  * SECURITY UPDATE: DoS or SSRF via forward proxy
    - debian/patches/CVE-2021-44224-1.patch: enforce that fully qualified
      uri-paths not to be forward-proxied have an http(s) scheme, and that
      the ones to be forward proxied have a hostname in
      include/http_protocol.h, modules/http/http_request.c,
      modules/http2/h2_request.c, modules/proxy/mod_proxy.c,
      modules/proxy/proxy_util.c, server/protocol.c.
    - debian/patches/CVE-2021-44224-2.patch: don't prevent forwarding URIs
      w/ no hostname in modules/proxy/mod_proxy.c,
      modules/proxy/proxy_util.c.
    - CVE-2021-44224
  * SECURITY UPDATE: overflow in mod_lua multipart parser
    - debian/patches/CVE-2021-44790.patch: improve error handling in
      modules/lua/lua_request.c.
    - CVE-2021-44790

 -- Marc Deslauriers <email address hidden>  Wed, 05 Jan 2022 09:38:48 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Hirsute
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
httpd
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
apache2_2.4.46.orig.tar.gz 8.9 MiB 44b759ce932dc090c0e75c0210b4485ebf6983466fb8ca1b446c8168e1a1aec2
apache2_2.4.46-4ubuntu1.5.debian.tar.xz 897.4 KiB 9372366c3b30d0a4e290e1279e3d1e384f98e209658ac80bf133978cc098bbfb
apache2_2.4.46-4ubuntu1.5.dsc 3.3 KiB 8ff30fee567a8933e5ddc3602c583647f48c8c451d50334d514c9a20516cde3a

View changes file

Binary packages built by this source

apache2: No summary available for apache2 in ubuntu hirsute.

No description available for apache2 in ubuntu hirsute.

apache2-bin: No summary available for apache2-bin in ubuntu hirsute.

No description available for apache2-bin in ubuntu hirsute.

apache2-bin-dbgsym: No summary available for apache2-bin-dbgsym in ubuntu hirsute.

No description available for apache2-bin-dbgsym in ubuntu hirsute.

apache2-data: No summary available for apache2-data in ubuntu hirsute.

No description available for apache2-data in ubuntu hirsute.

apache2-dev: No summary available for apache2-dev in ubuntu hirsute.

No description available for apache2-dev in ubuntu hirsute.

apache2-doc: No summary available for apache2-doc in ubuntu hirsute.

No description available for apache2-doc in ubuntu hirsute.

apache2-ssl-dev: No summary available for apache2-ssl-dev in ubuntu hirsute.

No description available for apache2-ssl-dev in ubuntu hirsute.

apache2-suexec-custom: No summary available for apache2-suexec-custom in ubuntu hirsute.

No description available for apache2-suexec-custom in ubuntu hirsute.

apache2-suexec-custom-dbgsym: No summary available for apache2-suexec-custom-dbgsym in ubuntu hirsute.

No description available for apache2-suexec-custom-dbgsym in ubuntu hirsute.

apache2-suexec-pristine: No summary available for apache2-suexec-pristine in ubuntu hirsute.

No description available for apache2-suexec-pristine in ubuntu hirsute.

apache2-suexec-pristine-dbgsym: No summary available for apache2-suexec-pristine-dbgsym in ubuntu hirsute.

No description available for apache2-suexec-pristine-dbgsym in ubuntu hirsute.

apache2-utils: No summary available for apache2-utils in ubuntu hirsute.

No description available for apache2-utils in ubuntu hirsute.

apache2-utils-dbgsym: No summary available for apache2-utils-dbgsym in ubuntu hirsute.

No description available for apache2-utils-dbgsym in ubuntu hirsute.

libapache2-mod-md: No summary available for libapache2-mod-md in ubuntu hirsute.

No description available for libapache2-mod-md in ubuntu hirsute.

libapache2-mod-proxy-uwsgi: No summary available for libapache2-mod-proxy-uwsgi in ubuntu hirsute.

No description available for libapache2-mod-proxy-uwsgi in ubuntu hirsute.